Endpoint Validation Tokens for Concealed Secure Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission methods are vulnerable to unauthorized access and inference by eavesdroppers due to identifiable IP addresses and potential decryption of encrypted data, even with complex encryption algorithms, which can be cracked by improved computing resources.
Innovation Solution
Implementing a scatter network device with a key exchange application that performs out-of-band key exchanges using different communication bands for encryption keys and endpoint validation tokens, encrypting data as padded uniform random blobs (PURBs) to conceal metadata and prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted using complex encryption algorithms, then data confidentiality is improved, but the encryption can still be cracked by improved computing resources
Solution Approach 1:
The encryption system is segmented into multiple independent components: endpoint validation tokens (EVTs) for authentication, symmetric encryption keys for data confidentiality, and asymmetric key pairs for key exchange. This segmentation ensures that compromising one component does not compromise the entire system, as each component serves a specific function and can be independently managed and rotated.
Solution Approach 2:
Endpoint validation tokens are generated and validated in advance before data transmission begins. The symmetric encryption keys are established through a preliminary key exchange process using asymmetric cryptography. This preliminary setup ensures that all security measures are in place before any data is transmitted, preventing retroactive security breaches.
2Productivity
If IP addresses are used for data routing, then data transmission is efficient, but eavesdroppers can observe and infer transmission information
Solution Approach 1:
The patent introduces endpoint validation tokens and symmetric encryption keys as intermediary elements between the data sender and receiver. These intermediaries enable secure data transmission without relying on visible IP addresses for authentication and encryption. The intermediaries mask the direct relationship between senders and receivers, preventing eavesdroppers from inferring transmission details while maintaining efficient data routing through the encrypted channels.
3Device complexity
If encryption keys are transmitted through the same communication band as data, then key exchange is simplified, but keys become vulnerable to interception
Solution Approach 1:
The communication process is segmented into separate phases: asymmetric key exchange phase and symmetric data encryption phase. The asymmetric keys are exchanged through one communication channel, while the symmetric encryption keys are derived and used for data transmission through another channel. This segmentation isolates the key exchange from data transmission, reducing the risk of key interception while maintaining simplified key management.
Data Source
AI summary
Examples of the disclosure provide for a scatter network device. In some examples, the scatter network device includes a non-transitory memory, at least one processor, and a key exchange application stored in the non-transitory memory. When executed by the at least one processor, the key exchange application transmits a key exchange request to a first network endpoint, the key exchange request including an identifier of the scatter network device, receives a key exchange response from the first network endpoint, the key exchange response including a set of one-time-use endpoint validation tokens (EVTs) uniquely associated with the identifier of the scatter network device, and transmits an authenticated message to a second network endpoint, the authenticated message including a first of the set of one-time-use EVTs concatenated with an encrypted data portion.